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Listing of Claims; 

1. (Currently Amended) A method for executing an 
obfuscated application program, the method comprising: 

receiving an obfuscated application program, said 
obfuscated application program comprising at least one 
instruction opcode value encoded using one of a 
plurality of instruction set opcode value encoding 
schemes^ 

wherein each of said instruction set opcode 
value encoding schemes includes an entry 
corresponding to said at least one instruction 
opcode value; and 

each of said instruction set opcode value 
encoding schemes uses a different opcode value 
encoding for said entry ; 

determining a dispatch table associated with said 
application program, said dispatch table corresponding 
to said one of a plurality of instruction set opcode 
value encoding schemes; and 

executing said application program using said 
associated dispatch table. 

2. (Original) The method of claim 1 wherein said 
determining comprises generating said dispatch table in 
response to said receiving. 
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3. (Original) The method of claim 1 wherein said 
determining comprises selecting a dispatch table from a 
plurality of dispatch tables in response to said receiving, 
said plurality of dispatch tables stored in a memory. 

4. (Currently Amended) A method for executing an 
obfuscated application program, the method comprising: 
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receiving an obfuscated application program, said 
obfuscated application program comprising at least one 
instruction opcode value encoded using one of a 
plurality of non-standard instruction set opcode value 
encoding schemes^ 

wherein each of said non-standard 

instruction set opcode value encoding schemes 

include an entry corresponding to said at least 

one instruction opcode value; and 

each of said non-standard instruction set 

opcode value encoding schemes uses a different 

opcode value encoding for said entry ; 

determining an instruction set opcode value 
encoding scheme associated with said obfuscated 
application program; 

rewriting said application program using a 
standard opcode value encoding scheme if said received 
application program is not encoded using said standard 
opcode value encoding scheme; and 

executing said application program using a 
dispatch table associated with said standard opcode 
value encoding scheme. 
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5. (Currently Amended) A method for application 
program obfuscation, the method comprising: 

reading an application program comprising code; 

transforming said application program code into 
transformed application program code that uses one of 
a plurality of opcode value encoding schemes of a 
dispatch table associated with said application 
program^ 

wherein each of said instruction set opcode 
value encoding schemes includes an entry 
corresponding to at least one instruction opcode 
value; and 
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each of said instruction set opcode value 
encoding schemes uses a different opcode value 
encoding for said entry ; and 

sending said transformed application program 

code . 



6. (Original) The method of claim 5, further 
comprising receiving an application program request from a 
user device, said transforming occurring in response to 
said receiving. 

7. (Original) The method of claim 5 wherein 

said method further comprises, after said 
creating, applying a cryptographic process to said 
obfuscated application program together with a 
cryptographic key to create an encrypted obfuscated 
application program; and 

said sending comprises sending said encrypted 
obfuscated application program. 

8. (Withdrawn) A method for creating an opcode value 
encoding scheme for an instruction set, the method 
comprising : 

creating a series of numbers using a randomized 
process ; 

filtering said series to remove duplicate 
numbers ; and 

creating a one-to-one mapping between instruction 
implementation methods in an instruction set and said 
numbers . 
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9. (Withdrawn) A method for creating an opcode value 
encoding scheme for an instruction set, the method 
comprising : 

selecting a seed and a cryptographic key; 
creating a series of numbers based at least in 
part on said seed and said cryptographic key, said 
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seed having a size that is less than the size of said 
series ; 

filtering said series to remove duplicate 
numbers ; and 

creating a one-to-one mapping between instruction 
implementation methods in an instruction set and said 
numbers . 



10. (Withdrawn) The method of claim 9 wherein said 
creating comprises using a loop back hash function to 
create said series. 



11. (Withdrawn) The method of claim 10 wherein said 
loop back hash function comprises the MD4 algorithm. 

12. (Withdrawn) The method of claim 10 wherein said 
loop back hash function comprises the MD5 algorithm. 

13. (Withdrawn) The method of claim 10 wherein said 
loop back hash function comprises the SHA-1 algorithm. 

14. (Withdrawn) The method of claim 10 wherein said 
key is based at least in part on a target ID. 

15. (Withdrawn) The method of claim 14 wherein said 
target ID comprises a VM ID. 
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16. (Currently Amended) A program storage device 
readable by a machine, embodying a program of instructions 
executable by the machine to perform a method for executing 
an obfuscated application program, the method comprising: 

receiving an obfuscated application program, said 
obfuscated application program comprising at least one 
instruction opcode value encoded using one of a 
plurality of instruction set opcode value encoding 
schemes, 
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wherein each of said instruction set opcode 
value encoding schemes includes an entry 
corresponding to said at least one instruction 
opcode value; and 

each of said instruction set opcode value 
encoding schemes uses a different opcode value 
encoding for said entry ; 

determining a dispatch table associated with said 
application program, said dispatch table corresponding 
to said one of a plurality of instruction set opcode 
value encoding schemes; and 

executing said application program using said 
associated dispatch table. 

17. (Original) The program storage device of claim 
16 wherein said determining comprises generating said 
dispatch table in response to said receiving. 

18. (Original) The program storage device of claim 
16 wherein said determining comprises selecting a dispatch 
table from a plurality of dispatch tables in response to 
said receiving, said plurality of dispatch tables stored in 
a memory. 

19. (Currently Amended) A program storage device 
readable by a machine, embodying a program of instructions 
executable by the machine to perform a method for executing 
an obfuscated application program, the method comprising: 

receiving an obfuscated application program, said 
obfuscated application program comprising at least one 
instruction opcode value encoded using one of a 
plurality of non-standard instruction set opcode value 
encoding schemes^ 
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each of said non-standard instruction set 
opcode value encoding schemes uses a different 
opcode value encoding for said entry ; 



determining an instruction set opcode value 
encoding scheme associated with said obfuscated 
application program; 

rewriting said application program using a 
standard opcode value encoding scheme if said received 
application program is not encoded using said standard 
opcode value encoding scheme; and 

executing said application program using a 
dispatch table associated with said standard opcode 
value encoding scheme. 

20. (Currently Amended) A program storage device 
readable by a machine, embodying a program of instructions 
executable by the machine to perform a method for 
application program obfuscation, the method comprising: 

reading an application program comprising code; 
transforming said application program code into 
transformed application program code that uses one of 
a plurality of opcode value encoding schemes of a 
dispatch table associated with said application 
program^ 

wherein each of said instruction set opcode 
value encoding schemes includes an entry 
corresponding to at . least one instruction opcode 
value; and 

each of said instruction set opcode value 
encoding schemes uses a different opcode value 
encoding for said entry ; and 

sending said transformed application program 



code . 
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21. (Original) The program storage device of claim 
20, the method further comprising receiving an application 
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program request from a user device, said transforming 
occurring in response to said receiving. 

22. (Original) The program storage device of claim 
2 0 wherein 

said method further comprises, after said 
creating, applying a cryptographic process to said 
obfuscated application program together with a 
cryptographic key to create an encrypted obfuscated 
application program; and 

said sending comprises sending said encrypted 
obfuscated application program. 

23. (Withdrawn) A program storage device readable by 
a machine, embodying a program of instructions executable 
by the machine to perform a method for creating an opcode 
value encoding scheme for an instruction set, the method 
comprising: 

creating a series of numbers using a randomized 
process; 

filtering said series to remove duplicate 
numbers ; and 

creating a one-to-one mapping between instruction 
implementation methods in an instruction set and said 
numbers . 

24. (Withdrawn) A program storage device readable by 
a machine, embodying a program of instructions executable 
by the machine to perform a method for creating an opcode 
value encoding scheme for an instruction set, the method 
comprising : 



selecting a seed and a cryptographic key; 
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creating a series of numbers based at least in 
part oh said seed and said cryptographic key, said 
seed having a size that is less than the size of said 
series; 
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filtering, said series to remove duplicate 
numbers ; and 

creating a one-to-one mapping between instruction 
implementation methods in an instruction set and said 
numbers . 



25. (Withdrawn) The program storage device of claim 
24 wherein said creating comprises using a loop back hash 
function to create said series. 



26. (Withdrawn) The program storage device of claim 
25 wherein said loop back hash function comprises the MD4 
algorithm. 

27. (Withdrawn) The program storage device of claim 
25 wherein said loop back hash function comprises the MD5 
algorithm. 

28. (Withdrawn) The program storage device of claim 
25 wherein said loop back hash function comprises the SHA-1 
algorithm. 

29. (Withdrawn). The program storage device of claim 
25 wherein said key is based at least in part on a target 
ID. 



30. (Withdrawn) The program storage device of claim 
29 wherein said target ID comprises a VM ID. 
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31. (Currently Amended) An apparatus for executing 
an obfuscated application program, the apparatus 
comprising: 

a processor; and 

a memory, coupled to said processor, having 
stored therein computer readable instructions wherein 
executing said computer readable instructions on said 
processor provides: 
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means for receiving an obfuscated 
application program, said obfuscated application 
program comprising at least one instruction 
opcode value encoded using one of a plurality of 
instruction set opcode value encoding schemes^ 
wherein each of said instruction set 

opcode value encoding schemes includes an 

entry corresponding to said at least one 

instruction opcode value; and 

each of said instruction set opcode 

value encoding schemes uses a different 

opcode value encoding for said entry ; 

means for determining a dispatch table 
associated with said application program, said 
dispatch table corresponding to said one of a 
plurality of instruction set opcode value 
encoding schemes; and 

means for executing said application program 
using said associated dispatch table. 



32. (Original) The apparatus of claim 31 wherein 
said means for determining comprises means for generating 
said dispatch table in response to said receiving. 

33. (Original) The apparatus of claim 31 wherein 
said means for determining comprises means for selecting a 
dispatch table from a plurality of dispatch tables in 
response to said receiving, said plurality of dispatch 
tables stored in a memory. 

34. (Currently Amended) An apparatus for executing 
an obfuscated application program, the apparatus 
comprising : 
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a processor; and 

a memory, coupled to said processor, having 
stored therein computer readable instructions wherein 
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executing said computer readable instructions on said 
processor provides: 

means for receiving an obfuscated 
application program, said obfuscated application 
program comprising at least one instruction 
opcode value encoded using one of a plurality of 
non-standard instruction set opcode value 
encoding schemes^ 

wherein each of said non-standard 
instruction set opcode value encoding 
schemes include an entry corresponding to 
said at least one instruction opcode value; 
and 

each of said non-standard instruction 
set opcode value encoding schemes uses a 
different opcode value encoding for said 
entry ; 

means for determining an instruction set 
opcode value encoding scheme associated with said 
obfuscated application program; 

means for rewriting said application program 
using a standard opcode value encoding scheme if 
said received application program is not encoded 
using said standard opcode value encoding scheme; 
and 

means for executing said application program 
using a dispatch table associated with said 
standard opcode value encoding scheme." 
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35. (Currently Amended) An apparatus for application 
program obfuscation, the apparatus comprising: 
a processor; and 

a memory, coupled to said processor, having 
stored therein computer readable instructions wherein 
executing said computer readable instructions on said 
processor provides: 
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means for reading an application program 
comprising code; 

means for transforming said application 
program code into transformed application program 
code that uses one of a plurality of opcode value 
encoding schemes of a dispatch table associated 
with said application program^ 

wherein each of said instruction set 
opcode value encoding schemes includes an 
entry corresponding to at least one 
; instruction opcode value; and 

each of said instruction set opcode 
value encoding schemes uses a different 
opcode value encoding for said entry ; and 
means for sending said transformed 
application program code. 

36. (Original) The apparatus of claim 35, further 
comprising means for receiving an application program 
request from a user device, said transforming occurring in 
response to said receiving. 

37. (Original) The apparatus of claim 35 wherein 
said apparatus further comprises means for 

applying a cryptographic process to said obfuscated 
application program together with a cryptographic key 
to create an encrypted obfuscated application program 
after said creating; and 

said means for sending comprises means for 
sending said encrypted obfuscated application program. 
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38. (Withdrawn) An apparatus for creating an opcode 
value encoding scheme for an . instruct ion set, the apparatus 
comprising : 

means for creating a series of numbers using a 
randomized process; 
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means for filtering said series to remove 
duplicate numbers; and 

means for creating a one-to-one mapping between 
instruction implementation methods in an instruction 
set and said numbers . 

39. (Withdrawn) An apparatus for creating an opcode 
value encoding scheme for an instruction set, the apparatus 
comprising : 

means for selecting a seed and a cryptographic 

key; 

means for creating a series of numbers based at 
least in part on said seed and said cryptographic key, 
said seed having a size that is less than the size of 
said series; 

means for filtering said series to remove 
duplicate numbers; and 

means for creating a one-to-one mapping between 
instruction implementation methods in an instruction 
set and said numbers. 

40. (Withdrawn) The apparatus of claim 39 wherein 
said means for creating comprises means for using a loop 
back hash function to create said series. 

41. (Withdrawn) The apparatus of claim 40 wherein 
said loop back hash function comprises the MD4 algorithm. 

42. (Withdrawn) The apparatus of claim 40 wherein 
said loop back hash function comprises the MD5 algorithm. 

43. (Withdrawn) The apparatus of claim 40 wherein 
said loop back hash function comprises the SHA-1 algorithm. 
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said 



44. (Withdrawn) The apparatus of claim 40 wherein 
key is based at least in part on a target ID. 
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45. (Withdrawn) The apparatus of claim 44 wherein 
said target ID comprises a VM ID. 

46. (Currently Amended) An apparatus for executing 
an obfuscated application program, the apparatus comprising 
a user device configured to: 

receive an obfuscated application program, said 
obfuscated application program comprising at least one 
instruction opcode value encoded using one of a 
plurality of instruction set opcode value encoding 
schemes^ 

wherein each of said instruction set opcode 
value encoding schemes includes an entry 
corresponding to said at least one instruction 
opcode value; and 

each of said instruction set opcode value 
encoding schemes uses a different opcode value 
encoding for said entry ; 

determine a dispatch table associated with said ; 
application program, said . dispatch table corresponding 
to said one of a plurality of instruction set opcode 
value encoding schemes; and 

execute said application program using said 
associated dispatch table. 

47. (Original) The apparatus of claim 46 wherein 
said user device is further configured to generate said 
dispatch table in response to said receiving. 
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48. (Original) The apparatus of claim 46 wherein 
user device is further configured to select a dispatch 
table from a plurality of dispatch tables in response to 
said receiving, said plurality of dispatch tables stored in 
a memory. 
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49. (Currently Amended) An apparatus for executing 
an obfuscated application program, the apparatus comprising 
a user device configured to: 

receive an obfuscated application program, said 
obfuscated application program comprising at least one 
instruction opcode value encoded using one of a 
plurality of non-standard instruction set opcode value 
encoding schemes^ 



each of said non-standard instruction set 
opcode value encoding schemes uses a different 
opcode value encoding for said entry ; 
determine an instruction set opcode value 

encoding scheme associated with said obfuscated 

application program; 

rewrite said application program using a standard 

opcode value encoding scheme if said received 

application program is not encoded using said standard 

opcode value encoding scheme; and 

execute said application program using a dispatch 

table associated with said standard opcode value 

encoding scheme. 

50. (Currently Amended) An apparatus for application 
program obfuscation, the apparatus comprising an 
application program provider configured to: 

read an application program comprising code; 
transform said application program code into 
transformed application program code that uses one of 
a plurality of opcode value encoding schemes of a 



wherein each of said non-standard 



instruction set opcode value encoding schemes 
include an entry corresponding to said at least 
one instruction opcode value; and 
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dispatch table associated with said application 



program^ 



wherein each of said instruction set opcode 
value encoding schemes includes an entry 
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corresponding to at least one instruction opcode 
value; and 

each of said instruction set opcode value 
encoding schemes uses a different opcode value 
encoding for said entry ; and 

send said transformed application program code. 

51. (Original) The apparatus of claim 50, said 
application program provider further configured to receive 
an application program request from a user device, said 
transforming responsive to said receiving. 

52. (Original) The apparatus of claim 50 wherein 
said application program provider is further 

configured to apply a cryptographic process to said 
obfuscated application program together with a 
cryptographic key to create an encrypted obfuscated 
application program after said creating; and 

said application program provider is further 
configured to send said encrypted obfuscated ; 
- - application program: 

53. (Withdrawn) An apparatus for creating an opcode 
value encoding scheme for an instruction set, the apparatus 
comprising an application program provider configured to: 

create a series of numbers using a randomized 
process; 

filter said series to remove duplicate numbers; 

and 

create a one-to-one mapping between instruction 
implementation methods in an instruction set and said 
numbers . 
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54. (Withdrawn) An apparatus for creating an opcode 
value encoding scheme for an instruction set, the apparatus 
comprising an application program provider configured to: 
select a seed and a cryptographic key; 
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create a series of numbers based at least in part 
on said seed and said cryptographic key, said seed 
having a size that is less than the size of said 
series ; 

filter said series to remove duplicate numbers; 

and 

create a one-to-one mapping between instruction 
implementation methods. in an instruction set and said 
numbers . 

55. (Withdrawn) The apparatus of claim 54 wherein 
said application program provider is configured to use a 

. loop back hash function to create said series. 

56. (Withdrawn) The apparatus of claim 55 wherein 
said loop back hash function comprises the MD4 algorithm. 

57. (Withdrawn) The apparatus. of claim 55 wherein 
said loop back hash function comprises the MD5 algorithm. 

58. (Withdrawn) The apparatus of claim 55 wherein 
said loop back hash function comprises the SHA-1 algorithm. 

. 59. (Withdrawn) The apparatus of claim 55 wherein 
said key is based at least in part on a target ID. 

60. (Withdrawn) The apparatus of claim 59 wherein 
said target ID comprises a VM ID. 

61. (Withdrawn) A memory for storing data for access 
by an application program being executed on a data 
processing system, comprising: 

a data structure stored in said memory, said data 
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structure including information used by said 
application program execute an obfuscated application 
program, said data structure an obfuscated application 
program comprising at least one instruction opcode 
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value encoded using one of a plurality of instruction 
set opcode value encoding schemes . 

62. (Withdrawn) The memory of claim -61 wherein said 
data structure further comprises a cryptographic key and 
protected data, said protected data encrypted using said 
cryptographic key. 

63. (Withdrawn) The memory of claim 61 wherein said 
data structure further comprises an obfuscation descriptor 
that indicates an obfuscation method used to create said 
obfuscated application, program.: 
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